PD ISO IEC TR — ISO/IEC Technical Reports (TR) Single-File Series Overview (55 Standards)

📋 PD ISO/IEC TR are ISO/IEC Technical Reports adopted and published by BSI as Published Documents. A Technical Report (TR) in the ISO/IEC system records “supplementary information, data collection or guidance”; its content is typically more explanatory and advisory than an International Standard, supporting the understanding and application of standards. This review brings together 55 single-file technical reports in this batch, covering software engineering and programming languages, biometrics, information security management, generic cabling, media coding and streaming, identification cards and identity management, and IT governance within the information and communication technology (ICT) field.

1. Series Background 📌

Within the ISO/IEC Joint Technical Committee (JTC 1), when technical content is mature enough to share but not yet ready to become a formal international standard — or when studies and background research are needed — a Technical Report (TR) is issued. A TR may precede a formal standard as background research, or follow a standard as interpretation, examples and best practice. BSI brings these TRs into the UK through the PD series, allowing UK ICT industry to reference the technical conclusions reached at the international level.

A notable feature of this batch of 55 TRs is “series partition”: different parts under the same number (for example PD ISO/IEC TR 23009-3, the 291xx biometrics series, or the 270xx information security series) are each independent documents that together form a complete body of knowledge. This structure allows a TR to be consulted as a single topic or studied systematically as a series.

2. Document Inventory (55 items) 📚

The table below lists all 55 single-file PD ISO/IEC TR technical reports in this batch, ordered by number, with the document number and subject.

3. Technical Points of Representative Documents 🔬

1. PD ISO/IEC TR 19759:2016 — Guide to the Software Engineering Body of Knowledge (SWEBOK)

SWEBOK is the widely recognised body-of-knowledge guide for software engineering, defining the core knowledge areas of the discipline including software requirements, design, construction, testing, maintenance, configuration management, engineering management, engineering process, quality and engineering tools. Based on the V3 edition, this TR provides an authoritative framework for software engineering curricula, career development, certification and knowledge organisation, and is a key reference for software engineering education and assessment.

2. PD ISO/IEC TR 24722:2015 — Multimodal and Other Multibiometric Fusion

This report systematically describes multimodal and other multibiometric fusion approaches, explaining how biometric information from different modalities (fingerprint, face, iris, etc.) can be combined to improve recognition accuracy and resistance to attack. It covers fusion levels (sensor, feature, score and decision), fusion architectures, performance evaluation and security considerations, providing methodology for designing biometric systems in high-security scenarios.

3. PD ISO/IEC TR 27008:2011 — Guidelines for Auditors on Information Security Controls

This TR provides guidance for auditing information security controls (the controls defined in ISO/IEC 27002), guiding auditors in reviewing the design and operating effectiveness of each control, covering access control, physical and environmental security, communications and operations management, and incident management. It complements ISO/IEC 27001 certification auditing and is an important toolkit for information security audit practice.

4. PD ISO/IEC TR 11801-9903:2015 — Matrix Modelling of Generic Cabling Channels and Links

This report belongs to the ISO/IEC 11801 generic cabling family and provides matrix modelling methods for channels and links, used to analyse the performance parameters of cabling systems and their combinations. The matrix model helps designers predict transmission performance under different configurations, and is an important methodological support for the design and optimisation of data-centre, building and campus cabling.

5. PD ISO/IEC TR 38502:2014 — Governance of IT: Framework and Model

This TR supports ISO/IEC 38500 (governance of IT) by providing a framework and model for IT governance, explaining the roles, responsibilities, processes and relationships within a governance system and how organisations align IT investment with business objectives through institutional arrangements. It structures the decision-making mechanisms between the board, executives and the IT function, and is a practical reference for organisational IT governance.

4. Engineering Practice 🛠️

• 🔍 Knowledge systems: use SWEBOK (PD ISO/IEC TR 19759) as the framework for organising knowledge training and capability assessment of software engineering teams, significantly improving professional consistency.
• 📊 Biometric systems: when designing multimodal recognition systems, refer to fusion levels (TR 24722) and performance evaluation methods (TR 29189/29198) to balance accuracy, usability and security.
• 🔒 Information security auditing: combine the control audit guidance of TR 27008 with the ISO/IEC 27001 framework to build audit procedures covering both design effectiveness and operating effectiveness.
• 🏢 IT governance: combine ISO/IEC 38500 with TR 38502/38504 to establish board-level IT decision and oversight mechanisms, aligning IT strategy with organisational strategy.

5. Frequently Asked Questions ❓